p110r[.]xyz

This domain, p110r.xyz, is under investigation for brand impersonation targeting Bet365, a known gambling platform, with a focus on crypto gambling activities. Registered on December 16, 2025, through Gname.com Pte. Ltd., the domain has since been taken offline, though its infrastructure remains a concern. Analysis indicates the domain was hosted on a Hong Kong-based IP, 45.196.247.146, associated with AS140224 (Nebula Global LLC), a network frequently observed in fraudulent operations. The domain's nameservers—ns1.1111343.com, ns2.1111343.com, ns3.1111343.com, ns1.dnsbm.com, and ns2.dnsbm.com—are consistent with patterns seen in other high-risk domains, though no direct ties to known bulletproof hosting providers have been confirmed.

The page title, 'welcome-BET365,' provides clear evidence of intent to impersonate the Bet365 brand, aligning with the scam type classification of crypto gambling. While the domain is currently offline, its presence on one security blocklist and detection by 12 of 93 security vendors on VirusTotal prior to takedown underscores its malicious nature. AlienVault OTX further corroborates this, listing the domain in four threat intelligence pulses, suggesting prior engagement in fraudulent campaigns. Notably, the domain lacks an SSL certificate, a red flag for user security and legitimacy.

Defenders should treat this domain as high-risk, particularly for organizations in the gambling or financial sectors. Monitoring for re-registration or re-emergence under similar infrastructure (e.g., Nebula Global LLC or the identified nameservers) is recommended. Given the domain's association with crypto gambling, financial institutions should be alert to potential transactional fraud linked to this impersonation scheme. While the exact content of the site remains unanalyzed, the combination of brand impersonation, blocklist presence, and threat intelligence pulses provides sufficient evidence to classify p110r.xyz as a confirmed fraudulent domain.